text: With the opening up of telecom network resources to third parties, more and more value-added composite applications are developed and deployed. Security management for these composite applications becomes a practical and important issue. This paper presents a new security management mechanism based on hash chains. The new mechanism can provide real time authentication/authorization, real time execution process management, and real time charging validation for composite applications at the same time. In addition the new mechanism is very simple and efficient.